---
typeId: req
recordId: benac-id-003
fields:
  title: Identity and authentication are not authority
  statement: A principal identity and an authenticated session shall not grant
    authority by themselves. Local policy shall decide whether a claim, actor,
    package, Station, Storage Station, Compute Station, agent, or authenticated
    session may be relied on or used.
  rationale: Decentralized systems need attribution and authentication, but Benac
    remains locally sovereign.
  verification: Import a signed claim from an authenticated principal that is not
    locally trusted and verify that the claim is visible as evidence but does
    not grant execution or capability authority.
  testable: true
  status: draft
  area: BENAC-ID
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.1 Cryptographic identity, content identity, and provenance foundation
  order: 9
---
